Privacy Policy

This policy covers Arovia Herbs (“Arovia Herbs”, “we”, “us”), operating aroviaherbs.com. It explains how we handle personal information when you visit the site, place an order, or contact us.

What we collect

Information you give us

• Order details: name, shipping and billing address, email address, phone number, and the contents of your order.
• Payment information: handled entirely by Shopify and its payment processors. We never receive or store your full card number.
• Contact and newsletter: the name, email address, and message you submit through our forms.

Information collected automatically

• Device and usage data: IP address, browser and device type, pages viewed, referring site, and timestamps.
• Cookies: a cart identifier that keeps your basket intact between visits, plus the Meta pixel's advertising cookies described below.

We do not knowingly collect information from anyone under 18, and our products are not intended for minors.

Why we use it

• To process, fulfil, and support your orders — our primary purpose
• To respond when you contact us
• To send marketing email, but only where you have opted in
• To understand aggregate site usage and improve the store
• To measure and target our advertising on Facebook and Instagram
• To detect and prevent fraud and abuse
• To meet tax, accounting, and other legal obligations

Who we share it with

We do not sell your personal information for money. We share it with service providers who need it to do their job for us, each bound by their own contractual obligations, and with Meta for advertising as described under “Cookies and tracking”:

• Shopify — commerce platform, checkout, order and payment processing
• Resend — transactional and marketing email delivery
• Cloudflare — website hosting and delivery
• Meta Platforms — advertising measurement and audiences on Facebook and Instagram, through the Meta pixel
• Shipping carriers — to deliver your order

We may also disclose information where legally compelled, or to protect our rights, safety, or property.

How long we keep it

Order records are retained for 7 years to satisfy tax and accounting requirements. Contact form messages are kept for 2 years. Newsletter subscriptions are kept until you unsubscribe. Data collected by the Meta pixel is retained under Meta's own policies.

Your rights

Depending on where you live — including under the GDPR in the EEA and UK, and the CCPA/CPRA in California — you may have the right to:

• Access the personal information we hold about you
• Correct information that is inaccurate
• Delete your information, subject to our legal retention obligations
• Receive a portable copy of it
• Object to or restrict certain processing
• Opt out of marketing at any time
• Not be discriminated against for exercising any of these rights

To exercise any of them, email privacy@aroviaherbs.com. We respond within 30 days and may need to verify your identity first.

Marketing email

Every marketing email carries an unsubscribe link, and it works immediately. You can also email us to be removed. Transactional messages about an order you placed are not marketing and will still be sent.

Cookies and tracking

We use a strictly necessary cookie to hold your cart identifier — without it, the cart cannot work.

We also use the Meta pixel, a script from Meta Platforms that sets cookies and tells Meta which pages you view, which products you look at, and when you join our launch list or newsletter. It does not send the email address or phone number you enter. Meta uses this to measure our ads and to show our ads to you, and to people like you, on Facebook and Instagram. Under some US state laws this counts as “sharing” personal information for targeted advertising.

To opt out, turn on Global Privacy Control in your browser: we honour it, and the Meta pixel does not load when your browser sends it. You can also email privacy@aroviaherbs.com, block third-party cookies, or manage how Meta uses your activity in your Facebook or Instagram ad preferences.

Security

The site is served over HTTPS, payments are handled by PCI-compliant processors, and the cart cookie is set as HTTP-only and secure. No system is perfectly secure, and we can't guarantee absolute security — but we do not store what we don't need.

International transfers

We are based in the United States, and our providers process data there. If you order from outside the US, your information is transferred to and processed in the US under appropriate safeguards.

Changes

We'll update this page when our practices change and revise the date at the top. For material changes affecting how we use your data, we'll notify subscribers by email.

Contact

Email privacy@aroviaherbs.com or use our contact form.